Source: davical
Version: 1.1.1-1
Severity: normal
Tags: upstream

Hi.

This is something we should eventually think about:
Every normal user that can login to the admin interface
can also do all the "List Users", "List Resources", etc.
and also see the details of those, e.g the usernames, their
real names and email addresses.

Especially when one considers that Davical is wonderfully suited
to do vhosting (multiple domains, and therefore organisations, per DB)
this can be a privacy issue.


Cheers,
Chris.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to